Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: Q1sETs3w0g0/K//vLdztzbreBOzu7T/Ina+h6i9kpdo=
Subject key identifier: 92:EB:84:33:1B:FE:08:60:95:A9:02:BD:03:20:A4:0A:B0:84:8C:D9
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 01A0CA1019D8238847D6989AB885C2E62B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1A7B
Signing time: Tue 22 Sep 2026 17:00:47 +0000
Manifest this update: Tue 22 Sep 2026 17:00:47 +0000
Manifest next update: Wed 23 Sep 2026 17:00:47 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: DYkV04gki79D3asculnZRcHU37Q.roa (hash: qlIkHsV6HBqGkc4tTxIBB1jTZcTStbiHUpGcVOphuGk=)
3: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (hash: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=)
4: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
5: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: tm1NHS3FbS8J05o8VnRAMNe+SNBIVIfVqBfmWVWX8I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:19:d8:23:88:47:d6:98:9a:b8:85:c2:e6:2b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Sep 22 17:00:47 2026 GMT
Not After : Sep 23 17:00:47 2026 GMT
Subject: CN=92eb84331bfe086095a902bd0320a40ab0848cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:c2:d7:f9:75:89:54:10:43:83:03:eb:a5:
ed:04:ad:2f:6c:bd:ce:81:ba:2c:97:f3:25:33:41:
10:8e:40:34:79:65:b0:ed:39:68:81:48:68:f2:e2:
bc:8e:ea:f2:83:dd:5f:03:66:5d:64:bd:4a:fc:dd:
96:1d:66:19:fe:70:73:c0:67:d7:1b:ce:56:34:e9:
47:17:50:d0:ac:82:e7:df:e9:15:e9:13:12:d7:30:
c9:8b:d1:b5:9f:1a:87:de:58:df:5d:d3:10:d6:95:
36:16:38:6c:e5:c4:e3:69:49:1a:6b:c1:f9:be:ad:
d5:31:fa:9f:fa:fe:82:0b:9f:03:60:af:4d:45:8b:
1f:e4:cc:fb:da:d9:18:94:7a:1a:34:a0:13:fc:28:
a3:c7:2d:12:74:2c:d0:b2:0b:54:be:87:d5:ca:c9:
33:8b:1b:02:16:71:32:a3:8f:85:f8:ec:65:03:ce:
2a:d3:31:5a:9f:b5:ef:fa:2f:24:fc:b6:0c:3f:02:
2a:88:cc:e2:36:a1:ac:85:7e:14:27:f9:bd:7d:b9:
18:8d:e7:bb:13:b9:e2:d9:12:76:28:ee:6f:9b:98:
3b:56:c5:59:0b:b2:ef:f8:11:6b:66:f2:fa:8f:cd:
b3:b1:a4:35:87:5f:1c:71:4e:80:1e:f4:16:72:32:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:84:33:1B:FE:08:60:95:A9:02:BD:03:20:A4:0A:B0:84:8C:D9
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c8:34:fd:9e:0d:ac:1d:07:f4:5d:e9:af:5c:c9:c4:ca:f3:
a4:c3:a3:f3:7f:b4:8b:5c:77:a7:74:7a:37:05:bb:a8:14:67:
27:43:25:ef:14:61:17:61:f2:13:e9:37:73:67:d8:9e:72:ac:
0d:8e:ee:c7:b7:0a:3d:1b:68:df:00:c7:23:35:78:5b:34:c1:
be:2e:dd:18:ac:1b:7c:08:45:3f:ef:92:eb:6c:dc:3d:61:00:
e8:a7:c4:a9:3b:cf:2e:ce:c4:b3:47:3a:c2:f4:a5:ee:c3:a4:
0f:ff:1b:6d:19:bf:43:a8:14:36:63:fe:05:05:ea:e3:5a:7f:
15:9a:fa:ce:c8:f8:f8:3c:32:0b:f2:85:05:e9:05:88:d0:3a:
78:41:d6:22:be:72:1f:a0:c6:4f:75:d3:bf:92:81:d9:39:07:
42:07:4f:bf:aa:48:d1:d1:6e:b1:74:18:66:76:92:c9:e3:b2:
68:45:07:28:6c:2c:e7:99:35:fe:d5:5d:10:c2:84:79:b8:23:
0e:95:8e:25:82:28:c6:e1:e2:0c:20:91:fb:60:4a:66:32:94:
84:3a:26:a9:06:19:f3:b5:e0:65:27:e0:c3:f8:9d:2d:ee:85:
e3:88:10:32:e0:b7:6e:b5:28:c1:e8:03:58:de:a3:30:18:ea:
77:0c:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:21:19 2026 by rpki-client